Enforce profile-selected secret delivery in local and Docker runtimes - #5015

Merged

neubig merged 8 commits into

feat/agent-server-docker-runtimefrom

factory/profile-secret-boundary

Sep 13, 2026

Commits on Sep 9, 2026

feat(profiles): scope which secrets an agent profile receives

simonrosenberg
and
claude
committed
3c51d02

Commits on Sep 10, 2026

refactor(profiles): make secret_refs strictly the whole allow-list

simonrosenberg
and
claude
committed
cd86340

Commits on Sep 13, 2026

feat: expose runtime lifecycle contracts independently of Docker
openhands-agent
committed
584aa4a
chore: keep runtime lifecycle tests focused
openhands-agent
committed
f64e34f
Merge remote-tracking branch 'origin/feat-profile-secret-refs' into factory/restack-secrets
openhands-agent
committed
908a614
fix: deliver profile-selected secrets through shared launch and shell services
openhands-agent
committed
39e21ce
Merge branch 'factory/restack-lifecycle' into factory/ready-sdk-4966
openhands-agent
committed
ae05f6e
Merge branch 'factory/ready-sdk-4966' into factory/restack-secrets
openhands-agent
committed
379d41a